APC USV Checks "timeout" after Upgrading to RMA 8.22

[itelio]

Hello Alex,

here we go again

We have noticed that the APC UPS tests no longer work reliably since the update of the RMA agent.
Since then, the APC UPS tests have randomly changed status between "timeout" and OK. The APC USV has reported this with the mail
Informational - "Detected an unauthorized user attempting to access the SNMPv3 interface from 192.168.8.68".
Somehow the RMA 8.22 seems to have sent invalid packets here? Authentication has been checked and is OK from the SNMPv3 user.
The tests "half" worked, but we and customers were inundated with mails which were triggered by the APC UPS due to the "unauthorized" access.



After refresh the Tests all checks failed



After we had checked everything on the UPS and user side, I rolled back the agent to version 8.10 and 8.20 as a test and since then no more messages have occurred. The problem apparently only occurs with version 8.22.

Curiously, it only affected 2 UPSs, which is why I can't say 100% whether it's due to the RMA, but since the rollback everything is OK again...

For us, the issue has been resolved for the time being, but this is just a note in case we receive more information in this regard.


Hostmon 14.54
RMA 8.22 / 8.20 testwise and 8.10
HM Server: Windows Server 2022 latest Patch
No AV installed


Best regards

[KS-Soft]

May be SNMP agent on the device does not work according to specs?
Or we missed something when read specs

If you restart agent, perform test (Ok status?) then "refresh" test after 60sec, it works fine?
"refresh" test after 3min, works fine?

Then could you try to add 1 line into rma.ini file and restart agent?
rma.ini
[Misc] section
snmpv3UseCache=0

Regards
Alex

[itelio]

Hi Alex,

Sorry for the late reply.

I have installed the latest agent 8.22 as a test and added the line in rma.ini
Unfortunately, the behavior also occurs without SNMPv3 cache.
As soon as the service is restarted, the first tests fail with "timeout". At first only about half of them, but then all of them after a new refresh.
After some time, 3 out of 5 tests work again but never all of them permanently... strange.

I then reinstalled agent 8.20 and everything is running again without errors. Permanently error-free even after 10 refreshes

I have not yet been able to test SNMP V2 or V1 as V3 is used everywhere by our customers for security reasons.

[KS-Soft]

We rechecked code and do not see what is wrong
Could you please send rma.ini to support (by e-mail)?

What timeout is set for the tests?

Regards
Alex

[itelio]

Hi alex,

thanks for checking the code.
I have sent you the rma.ini.

current findings :
RMA Agent 8.22 > APC Checks not working > timeout randomly
RMA Agent 8.20 (x64) - Website Download - APC works fine but ODBC Checks are reply "RMA: 301 - [Microsoft][ODBC Driver Manager] The specified DSN has a mismatched driver and application architecture! > because x64. without no problems.



I had already set the timeout to 4000 and have now increased it again to 10000
I have now copied the RMA files for 8.22 from another system where everything is running and now no more (x64) flag and the ODBC tests are running again. However, the problem is now back with the UPS.... > increase Timeout does not work



-> UPS detects again SNMP unautorized Access and alerts via Email

- Revert to 8.20 via HM Package 14.50 (32 Bit) > ODBC and USV Checks are working

Sorry for this confusion but with each version something different does not work ...

[KS-Soft]

Regarding SNMP related tests:
You did not add requested setting into rma.ini file.
This is [Misc] section from your file

Code: Select all

[Misc]
WriteTest=1
PerfWorkMode2=0
CheckInternetConnection=1

Should be

Code: Select all

[Misc]
snmpv3UseCache=0
WriteTest=1
PerfWorkMode2=0
CheckInternetConnection=1

-----------------
Regarding ODBC:
there are x86 and x64 versions of RMA agent. You can use any version but yes, ODBC driver architecture should match RMA architecture.
In other words, if you are using RMA x64, then use x64 version of ODBC driver and setup ODBC source using x64 version of ODBC manager.
if you are using RMA x86, then use x86 version of ODBC driver and setup ODBC source using x86 version of ODBC manager.
RMA x86 included in host-mon.exe installation package
https://www.ks-soft.net/hostmon.eng/rma ... htm#SysReq

Windows x64:

RMA/x86 is 32-bit application, however it works correctly on Windows Server 2003 x64 Edition and new 64-bit Windows systems (Windows 7, Windows 10, Windows Server 2008 - Windows Server 2019) running on x86-64 (AMD64) systems (not on Itanium/IA-64). This 32-bit version included into Advanced Host Monitor package.
However in some cases you may need 64-bit version of the agent (for example you may need to use some 64-bit ODBC driver for ODBC Query test because 32-bit version of ODBC driver is not available). RMA/x64 can be downloaded as separate package; you may replace x86 version of Passive and/or Active RMA agents using rma.exe and rma_active.exe modules from rmawin64.zip archive.
Drawback: Active Script test does not work in 64-bit mode because Microsoft does not offer 64-bit version of msscript.ocs. You may use Shell Script test method instead.

If you are using RMA/x86 on 64-bit Windows system and you want to setup some ODBC Query tests, you should setup ODBC datasources using 32-bit ODBC Data Source Administrator (e.g. C:\WINDOWS\SysWOW64\odbcad32.exe).

Regards
Alex

[itelio]

Thank you for the detailed information.

The solution here was apparently to edit the ini and disable SNMPv3 caching

[Misc]
snmpv3UseCache=0
WriteTest=1
PerfWorkMode2=0
CheckInternetConnection=1

Problem is solved!

Thank you!

[KS-Soft]

You are welcome.

Anyone else experience the same problem?
Our SNMP enabled devices work without problems.

Regards
Alex